Name and address of the company

The controller within the meaning of the General Data Protection Regulation (hereinafter referred to as “GDPR”) and other national data protection laws of the Member States, as well as other data protection regulations, is:

MINERVA Management Beteiligungs GmbH
Holger Rausch
Kurfürstendamm 196
10707 Berlin
Germany

Telephone: +49 30 440 228 - direct extension (see CONTACT)
E-mail: info@minerva-immobilien.de

General data processing

Scope of and permission for processing personal data
As a general rule, we only collect and use our users’ personal data, if it is necessary for providing a functional website, as well as our contents and services. The collection and use of our users’ personal data usually only occurs after the user provides consent.

An exception applies in such cases where it is not possible to obtain prior consent for actual reasons and the processing of the data is permitted on the basis of statutory provisions.

The legal basis for the processing procedures of personal data with prior obtaining of consent from the person concerned is Art 6 (1) Letter a GDPR. For the processing of personal data, which are required to fulfil a contract or implement pre-contractual measure, the legal basis is Art. 6 (1) Letter b GDPR. For the processing of personal data to fulfil a legal obligation, the legal basis is Art. 6 (1) Letter c GDPR. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) Letter d GDPR serves as the legal basis. If the processing is required to preserve a legitimate interest of our company or a third party and if these interests affect the interest of the data subject in consideration of the constitutional rights and fundamental freedoms of the data subject, Art. 6 (1) Letter f GDPR serves as the legal basis for processing the data.

Data deletion and storage duration
The personal data of the data subjects are deleted or blocked, as soon as the purpose of the storage ceases to apply. Furthermore, storage can take place if it is prescribed on the basis of a statutory provision for processing the data. Blocking or deletion of the data also occurs, if the legally prescribed storage period expires, unless a necessity exists for continued storage of the data for the conclusion of a contract or contract fulfilment.

Data processing through use of our website

Visit to our website
When our website is accessed, the browser used on your terminal device automatically sends information to the server of our website. This information is temporarily stored in a so-called logfile. The following information is recorded without your involvement and is stored until it is deleted automatically: IP address of the requesting computer, date and time of the access, name and URL of the retrieved file, website from which the access occurs (referrer URL), browser used and operating system of your computer, if applicable, as well as the name of your access provider.

The data referred to are processed by us for the purposes of guaranteeing smooth-running connection establishment to the website, guaranteeing convenient use of our website, evaluation of the system security and stability, as well as for additional administrative purposes.

The legal basis for data processing is Art. 6 Subsection 1 S. 1 Letter f GDPR. Our legitimate interest follows from the purposes listed above for data collection. In no event, do we use the collected data for the purpose of drawing conclusions as to your personal details.

Enquiry by e-mail, telephone or telefax
If you contact us via e-mail, telephone, or telefax, your enquiry will exclusively be stored and processed by use, including all of the resulting personal data (name, enquiry) for the purpose of processing your issue. We do not disclose these data without your consent.

The processing of these data occurs on the basis of Art. 6 (1) Letter b GDPR, if your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing occurs shall be based on your consent (Art. 6 Para. 1 Letter a GDPR and/or our legitimate interests (Art. 6 Para. 1 Letter f GDPR), as we have a legitimate interest in the effective processing of enquiries addressed to us.

The data sent by you with contact enquiries remain with us, until you ask us to delete them, revoke your consent to storage or if the purpose of the data storage ceases to exist (e.g. after completed processing of your inquiry). Mandatory statutory provisions - particularly retention periods - remain unaffected.

Disclosure of data
Sending of your personal data to third parties does not occur for purposes other than those listed below. We only disclose your personal data to third parties, if you have given your express consent to do so in accordance with Art. 1 (1) S. 1 Letter a GDPR, the disclosure in accordance with Art. 6 (1) S. 1 Letter f GDPR is necessary to exercise and defend legal claims and no reason exists for assuming that you have an overriding legitimate interest in the non-disclosure of your data, in the event that a legal obligation exists for disclosure in accordance with Art. 6 (1) S. 1 Letter c GDPR, and this is legally admissible and is necessary in accordance with Art. 6 (1) S. 1 Letter b GDPR for processing contractual relationships.

Use of cookies
We use cookies to operate our website, in order to make it more user friendly. Several elements of our website require that the accessing browser can also be identified after changing websites.

Cookies are small files that enable specific information relating to the device to the stored on the user’s access device (PC, smartphone or similar). On the one hand, they have the purpose of user friendliness of websites and consequently the users (e.g. storage of login data). On the other hand, they have the purpose of recording statistical data and being able to analyse them to improve the service offered. The users can influence the use of the cookies. Most browsers have an option with which the storage of cookies can be restricted or completely prevented. However, it is pointed out that the use and particularly the convenience of use will be limited without cookies.

The user data collected in this way are pseudonymised using technical precautions. Therefore, the allocation of the data to the retrieving user is no longer possible. The data are not stored together with other personal data of the users.

The legal basis for the processing of personal data using cookies is Art. 6 (1) Letter f GDPR. The legal basis for the processing of personal data using technically necessary cookies is Art. 6 (1) Letter f GDPR. The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 (1) Letter a GDPR, if a relevant consent from the user exists.

The purpose of using technically necessary cookies is to simplify the use of websites for the users. Several functions of our website cannot be offered without the use of cookies. For this, it is necessary that the browser is also recognised after a change of website.

The use of the analysis cookies takes place for the purpose of improving the quality of our website and its contents. Through the analysis cookies, we find out how the website is used and can use this to constantly optimise our service.

Our legitimate interest in the processing of personal data also lies in these purposes, on the basis of Art. 6 (1) Letter f GDPR.

Services of third-party providers
We have integrated contents, services and offerings of other providers on the website. For example, these are maps that are provided by Google Maps, YouTube videos, graphics and images from other websites. For these data to be retrieved and displayed in the user’s browser, the transmission of the IP address is mandatory. The providers (hereinafter referred to as “third-party providers”) therefore perceive the IP address of the respective user.

Although we make every effort to exclusively use third-party providers, which only need the IP address for being able to deliver contents, we have no influence on whether the IP address may possibly be stored. In this case, this process has statistical purposes, inter alia. If we become aware that the IP address is being stored, we will inform our users about this.

Implementation and use of Google Analytics (with anonymisation function)
The data controller has integrated components of Google Analytics (with anonymisation function) into this website. Google Analytics is a web analysis service. Web analysis is the collection, gathering and evaluation of data about the behaviour of website visitors. A web analysis service records data, inter alia, regarding from which website a data subject has come to a website (so-called referrer), which sub-sites of the website are accessed or how often and for which dwell time a sub-site was viewed. A web analysis is mainly used for the optimisation of a website and for a cost-benefit analysis of Internet advertising.

The operating company of the Google Analytics component is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The data controller uses the “_gat._anonymizeIp” add-on for the web analysis via Google Analytics. With this add-on, the IP address of the data subject’s network connection is abbreviated by Google and anonymised, if the access to our website occurs from a Member State of the European Union or from another Contracting State to the Agreement on the European Economic Area.

The purpose of the Google Analytics component is the analysis of the visitor flow on our website. Google uses the acquired data and information, inter alia, for evaluating the use of our website, in order to compile reports for us, which show the activities on our website, and in order to provide additional services related to the use of our website.

Google Analytics sets a cookie on the data subject’s information technology system. It has already been explained above, what cookies are. By setting cookies, Google is able to perform an analysis of the use of our website. Each time one of the individual pages of this website is accessed, which is operated by the data controller and on which a Google Analytics component has been integrated, the Internet browser on the data subject’s information technology system is automatically instigated by the respective Google Analytics component, to send data to Google for the purpose of online analysis. Within the scope of the technical procedure, Google receives information about personal data, such as the IP address of the data subject, which Google can use to trace the origin of the visitors and clicks and subsequently enable commission settlements.
Using the cookies, personal information, such as the access time, the location, from which access originated and the frequency of the visits to our website by the data subject are stored. During every visit to our website, these personal data, including the IP of the data subject’s Internet connection, is sent to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may possibly pass on these personal data, which are collected using the technical procedure, to third parties.

As already described above, the data subject can prevent the setting of cookies by our website at any time using an appropriate setting of the Internet browser and thereby permanently object to the setting of cookies. Such a setting of the web browser used would also prevent Google from setting a cookie on the data subject’s information technology system. Furthermore, a cookie that has already been set by Google Analytics can be deleted using an Internet browser or other software programs.

Furthermore, the data subject has the opportunity to object to and prevent the collection of the data generated by Google Analytics, relating to the use of this website, as well as the processing of these data, by Google. For this, the data subject must download and install a browser add-on at the link https://tools.google.com/dlpage/gaoptout. This browser add-on notifies Google Analytics via JavaScript that no data and information can be sent to Google Analytics regarding the visiting of websites. The installation of the browser add-on is regarded by Google as an objection. If the data subject’s information technology system is deleted, formatted or reinstalled later on, the data subject must install the browser add-on again, in order to deactivate Google Analytics. If the browser add-on is deinstalled or deactivated by the data subject or another person, within the data subject’s sphere of influence, the possibility exists for a reinstallation or reactivation of the browser add-on.

Additional information and the valid privacy policy of Google can be accessed athttps://www.google.de/intl/de/policies/privacy/ and at http://www.google.com/analytics/terms/de.html abgerufen werden. Google Analytics is explained in further detail at this link https://www.google.com/intl/de_de/analytics/ genauer erläutert.

Implementation and use of Google Maps
On our website, we rely on the “Google Maps” component of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.

Each time the “Google Maps” component is accessed, a cookie is set by Google, in order to process user settings and data on the page on which the “Google Maps” component is integrated. As a rule, this cookie is not deleted by closing the browser, it expires after a certain period of time, unless it has been deleted manually beforehand.

If you do not agree to this processing of your data, the option exists to disable the “Google Maps” service and prevent the transmission of data to Google in this way. To do this, you must disable the Java Script function in your browser. However, we point out that in this case, you may possibly not be able to use “Google Maps” at all or only to a limited extent.

The use of "Google Maps" and the information obtained via "Google Maps" takes place in accordance with the Google terms and conditions of use http://www.google.de/intl/de/policies/terms/regional.html and the additional terms and conditions of “Google Maps” https://www.google.com/intl/de_de/help/terms_maps.html.

Implementation and use of MyFonts
Our website uses fonts that are provided by MyFonts Inc., 600 Unicorn Park Drive, Woburn, MA 01801, USA. When accessing the website, data are also retrieved from a server of MyFonts, as a result of which MyFonts at least gains knowledge of your IP address. Amongst other things, MyFonts also finds out that you used the font via our website, as well as several technical details about your browser, as nearly every web browser automatically sends these data to the server with each access. Several browsers allow the data sent by the server to be restricted or modified, however, whether this is possible depends on the browser’s producer. Even if MyFonts only needs the transmitted information, particularly the IP address, to deliver the retrieved contents, we do not know about this and we have no influence over whether and to what extent MyFonts also statistically evaluates or stores this information. Further information about data privacy at MyFonts can be retrieved at the following link: https://www.myfonts.com/info/terms-and-conditions.

Cooperation with processors, joint controllers and third parties
Insofar as we disclose data to other persons and companies within the scope of our processing (processors, joint processors or third parties), send data to these or otherwise grant them access to data, this only occurs on the basis of legal permission (e.g. if sending of the data to third parties, such as payment service providers is required for contract fulfilment), if users have consented, a legal obligation prescribes this or on the basis of our vested interests (e.g. for the use of authorised representatives, web hosters, etc.).

If we disclose data to other companies in our Group of companies or otherwise grant them access, this specifically takes place for administrative purposes as a legitimate interest and also on a basis in compliance with the legal provisions.

Transmissions to third countries
Insofar as we process data in a third country (i.e. outside of the European Union (EU) or the European Economic Area (EEA) or the Swiss Confederation) or disclose it within the scope of using third-party services or if disclosure/transmission of data occurs to third parties, this only occurs, if it is required for fulfilling our (pre-)contractual duties, on the basis of your consent, on the basis of a legal obligation or on the basis of our vested interests. Subject to legal or contractual permissions, we only process, or have the data processed, in a third country if the statutory preconditions exist. I.e. the processing occurs, e.g. on the basis of specific guarantees, such as the officially acknowledged establishment of a privacy level corresponding to the EU (e.g. for the USA, by means of the “Privacy Shield”) or the observance of officially recognised specific contractual obligations.

Data protection for applications and in the application procedure
We collect and process the personal data of applicants for the purpose of processing the application procedure. The processing may also occur electronically. This is particularly the case, if an applicant sends corresponding application documents electronically, e.g. by e-mail using a web form available on the website, to us. If we conclude an employment contract with the applicant, the sent data are stored for the purpose of processing the employment relationship in accordance with the statutory provisions. If no employment contract is concluded by us with the applicant, the application documents are automatically deleted two months after notifying the rejection decision, provided that our other legitimate interests do not oppose deletion. Other legitimate interest in this sense is e.g. a burden of proof in proceedings under the General Equal Treatment Act (AGG).

Rights of the data subject
You have the right:
(1) in accordance with Art. 15 GDPR, to request information from us about your personal data, which we process. In particular, you can request information about the processing purposes, the category of the personal data, the categories of recipients, to whom your data have been or will be disclosed, the planned storage duration, the existence of a right to correction, deletion, restriction of the processing or contradiction, the existence of a right of complaint, the origin of your data, if these have not been collected by us, as well as about the existence of automated decision-making, including profiling and possibly significant information about their details;
(2) in accordance with Art. 16 GDPR, you may immediately request the correction of inaccurate or completion of your personal data stored with us;
(3) in accordance with Art. 17 GDPR, request the deletion of our personal data stored with us, if the processing is not required to exercise the right of free expression of opinion and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
(4) in accordance with Art. 18 GDPR, request the restriction of processing your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you reject the deletion and we no longer require the data, but you need it to assert, exercise or defend legal claims or you have filed an objection against processing in accordance with Art. 21 GDPR;
(5) in accordance with Art. 20 GDPR, you can obtain your personal data, which you have provided to us, in a structured, commonly-used and machine-readable format or request that it be transmitted to another controller;
(6) in accordance with Art. 7 Subsection 3 GDPR, you have the right to withdraw your given consent at any time. The consequence of this is that we may no longer continue the data processing, which was based on this consent, for the future and
(7) in accordance with Art. 77 GDPR, you can lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual abode or workplace or the registered office of our law firm.

Right to object
For reasons, which arise from your specific situation, you have the right to file an objection to the processing of your personal data, on the basis of Art. 6 Subsection 1 letter e or f GDPR; this also applies to profiling based on this provision.

The controller will no longer process your personal data, unless it can provide evidence of mandatory protectable reasons for the processing, which outweigh your interests, rights and freedoms, or are for the purpose of processing the assertion, exercising or defence of legal claims.

If your personal data are processed in order to perform direct marketing, you have the right to object to the processing of your personal data for the purpose of such marketing; this also applies to profiling, insofar as it is related to such direct marketing.

If you object to processing for the purpose of direct marketing, we will no longer process your personal data for these purposes.

You have the opportunity to exercise your right to object using an automated procedure, for which technical specifications are used, in relation to the use of information society services - without prejudice to Regulation 2002/58/EC.

Automated decision on a case-by-case basis, including profiling
You have the right to be subjected to a decision, which is not exclusively based on automated processing - including profiling - which develops legal effect with respect to you or significantly impairs you in a similar manner. This does not apply, if the decision

(1) for the conclusion or fulfilment of a contract between you and the controller is required,
(2) is admissible on the basis of legal provisions of the Union or the Member States, which the controller is governed by and these legal provisions contain appropriate measures for preserving your rights and freedoms, as well as your legitimate interests or
(3) occurs with your express consent.
However, these decisions may not be based on specific categories of personal data in accordance with Art. 9 (1) GDPR, unless Art. 9 (2) Letter a or g GDPR applies and appropriate measures have been taken to protect the rights and freedoms, as well as your legitimate interests.

With regard to the cases referred to in (1) and (3), the controller shall take appropriate measures for preserving the rights and freedoms, as well as your legitimate interests, which at least includes the right to influence a person to intervene on behalf of the controller, to present one’s own perspective and to contest the decision.

As a company that is aware of its responsibility, we waive automated decision-making or profiling.

Data security
Within the website visit, we use the widely prevalent SSL procedure (secure socket layer) in conjunction with the respective highest encryption level, which is supported by your browser. As a rule, this involves 256-bit encryption. If your browser does not support 256-bit encryption, we resort to 128-bit v3 technology instead. You can identify whether an individual page of our Internet presence has been transferred using encryption, you can recognise this by the closed illustration of the key/lock symbol in the bottom status bar of your browser.

We also use appropriate technical and organisational security measures, in order to protect your data from accidental or malicious manipulation, partial or complete loss, destruction of from unauthorised access by third parties. Our security measures are continuously improved in accordance with technological developments.

Topicality and amendment of this privacy policy
This privacy policy is currently valid and has the status of August 2020.

Through the further development of our website and offers regarding or on the basis of amended legal or official stipulations, it may become necessary to change this privacy policy. The respective current privacy policy can be retrieved and printed out by you at any time via this address.